Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Mytob residual effects [CLOSED]

ChickenArise

Posted 15 June 2005 - 02:38 PM

ChickenArise

New Member

Member

5 posts

My parents' computer was recently infected with Mytob. I've managed to get rid of the virus, and I've fixed most of the spyware. however, some of it is rather persistent, and they are having trouble accessing the internet intermittently. I notice a few things that definitely need attention from this log, but I'm waiting to do any more so that I can just finish this.

Advertisements

tampabelle

Posted 15 June 2005 - 03:01 PM

tampabelle

Member 5k

Retired Staff

6,363 posts

Hi Chickenarise,

Please read these instructions carefully and print them out! Be sure to follow ALL instructions!

During the fix, u will be asked to fix some entires, delete some files or uninstall sosme programs. If in case, you do not see those entires / files / programs, please make a note of it. Continue with the fix and in your next post please inform me of all deviations from the fix prescribed.

Locate "smitfraud.reg" on your desktop and double-click it. When asked if you want to merge with the registry, click YES. Wait for the "merged successfully" prompt then follow the rest of the instructions below.

Go to Start > Control Panel > Add or Remove Programs and remove the following programs, if found:

2.) Right-Click HERE and Save As to download DelDomains.inf to your desktop.To use: RIGHT-CLICK DelDomains.inf on your desktop and select: Install (no need to restart)Note: This will remove all entries in the "Trusted Zone" and "Ranges" also.

ChickenArise

Posted 16 June 2005 - 07:50 AM

ChickenArise

New Member

Topic Starter

Member

5 posts

the 'paste to clipboard' option for killbox didn't work, but cut and pasting each individual file and seeing if it existed by clicking on 'properties' only returned results for one of the files, which we proceeded to remove as per instructions.

tampabelle

Posted 16 June 2005 - 09:15 AM

The scan results show that we still have some work to do. Please read the instructions carefully and copy them into a text file on your desktop for easy access.

During the fix, u will be asked to fix some entires, delete some files or uninstall sosme programs. If in case, you do not see those entires / files / programs, please make a note of it. Continue with the fix and in your next post please inform me of all deviations from the fix prescribed.

Please reboot the PC in Safe Mode (repeatedly tap the F8 key when the PC is starting up). In the menu which comes up Choose the Safe Mode option.

Open Add or Remove Programs (click on Start ---> Settings ---> Control panel. This should be the 3rd item). Uninstall or remove the following items, if found -

Open Windows Explorer (right click on Start and then click on explore). Locate and delete the following files and folders, if found -

Folders C:\Documents and Settings\Webb\Favorites\Fun & Games C:\Documents and Settings\Webb\Favorites\Going Places C:\Documents and Settings\Webb\Favorites\Living C:\Documents and Settings\Webb\Favorites\ShopC:\Documents and Settings\Webb\Favorites\Technology

Also, someone has recently gotten access to their paypal account. I think this was probably from the Mytob infection? They have resolved the issue so far with paypal, but I thought I'd mention it since it's probably related to these problems.

Regarding your query - Some of the spyware catches the clicks on your PC and then transmits the information. This could have contributed to the compromising of your Paypal account. Thats the reason why spyware is so dangerous !!!!!!!

tampabelle

Posted 20 June 2005 - 08:11 AM

ChickenArise

Posted 20 June 2005 - 08:14 AM

ChickenArise

New Member

Topic Starter

Member

5 posts

I will do so, but my parents went out of town before giving me a new one. They won't be back for a week, and I am too far away to go do it myself. (I started working on their problem while I was visitting)